Add conformance tests for the AdminNetworkPolicy API

[astoycos]

Now that the API has physically merged #30 We should look at adding conformance testing, cyclonus already does this for netpol so it seems to make sense to extend the tool for the AdminNetworkPolicy API as well.

[astoycos]

/good-first-issue
/help

[astoycos]

I would ensure #34 Is completed before tackling this.

[abhijit-dev82]

/assign

[olivercodes]

Hey @abhijit-dev82 do you think you'll have time for this one? If not I'd love to jump on it, but no worries either way!

[abhijit-dev82]

hey Sorry for the late reply. Please go ahead, have too many things on my hand for now.

[olivercodes]

hey Sorry for the late reply. Please go ahead, have too many things on my hand for now.

@abhijit-dev82 Hey no problem, life happens!

[mattfenwick]

Assuming this will be tackled using Cyclonus, I suggest something like:

1. pre work

   • upgrade k8s client libs to a recent version which includes ANP
   • upgrade other dependencies

2. figure out what the new ANP and BANP mean

   • brainstorm engine implementation ideas
   • identify corner cases
   • create list of questions to post to network-policy team: semantic clarifications

3. extend Cyclonus engine to support ANP and BANP

   • model
     • priority levels for policies
     • cluster-level policies (currently: cyclonus forces everything to have a namespace)
       • does isolation work differently for ANP? this says so: https://github.com/kubernetes-sigs/network-policy-api/blob/master/site-src/guides/api-overview.md#general-notes
     • pass
     • deny

4. add interesting test cases for network policies -- some ideas:

   • ANP by themselves
   • BANP by themselves
   • ANP + standard NP + BANP

5. end-user utilities (optional but very handy)

   • linting
   • pretty printing

[mattfenwick]

/unassign @abhijit-dev82
/assign @olivercodes

[olivercodes]

For those unaware, we also did a cyclonus deep dive today on Antrea Live (youtube):
https://www.youtube.com/watch?v=iuurc8852mE